Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/ec1103d9-e275-3cf6-8d03-7e4a684dd3fb.roa
File:                     ec1103d9-e275-3cf6-8d03-7e4a684dd3fb.roa (raw, json)
Hash identifier:          2gFQquQqrFQtkXZjBnyjxDu9lxJZykjWBfCLLfhAkLE=
Subject key identifier:   0E:CA:07:96:D7:EB:FD:25:8E:0F:56:2F:67:D1:50:15:4E:10:90:BD
Certificate issuer:       /CN=397724ba-b516-4bac-893a-fcaae9e60f35
Certificate serial:       010D0C9F43285839D55296417E5CEFB31A03C180
Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/ec1103d9-e275-3cf6-8d03-7e4a684dd3fb.roa
Signing time:             Mon 03 May 2021 04:00:00 +0000
ROA not before:           Mon 03 May 2021 04:00:00 +0000
ROA not after:            Thu 02 May 2030 04:00:00 +0000
asID:                     11686
IP address blocks:        2610:128::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:d5:52:96:41:7e:5c:ef:b3:1a:03:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35
        Validity
            Not Before: May  3 04:00:00 2021 GMT
            Not After : May  2 04:00:00 2030 GMT
        Subject: CN=b311b72f-9c59-442c-a520-7cbe0388156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:27:dc:d1:36:3f:6a:68:1f:7f:33:8d:ad:50:
                    86:b8:5a:e2:0f:cf:66:6a:1b:09:69:ca:b8:8d:45:
                    0a:9e:87:29:59:d5:1b:d9:54:d6:4d:2d:33:3c:d8:
                    76:c5:d9:1b:4a:f6:6a:8f:cb:ce:94:c0:b6:0a:a3:
                    a1:58:03:5e:11:3a:98:5e:1a:0d:37:af:2b:dd:3d:
                    28:0b:61:7b:5a:44:7e:84:04:ff:37:e9:56:00:07:
                    60:5a:bd:33:f6:6e:1c:d3:95:22:d4:24:42:00:75:
                    d6:b1:04:49:1b:8d:78:6e:c6:cc:46:17:66:4b:71:
                    bd:72:4f:83:f8:e9:7a:b7:8d:e4:dc:a7:df:4a:2b:
                    e7:67:c8:cd:fc:e8:af:17:cb:00:c0:b9:75:dc:1f:
                    c9:87:80:4c:59:e4:f6:88:e8:e5:4f:ff:6e:09:78:
                    e8:1b:98:93:ad:c8:b2:a0:e3:fb:1c:45:c9:86:8c:
                    d5:92:5a:05:15:d1:de:99:fa:c2:ef:72:75:1e:40:
                    45:5a:f5:9e:15:2d:c1:d0:47:ac:ff:80:c7:42:6b:
                    f1:8b:d3:83:7e:9d:e5:ce:55:21:7b:1b:19:01:b4:
                    8f:ff:45:39:c5:42:8e:c8:a4:cd:3d:e6:f3:e1:c2:
                    a8:ef:e3:80:8c:33:46:12:22:b3:d6:ee:7a:56:ea:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:07:96:D7:EB:FD:25:8E:0F:56:2F:67:D1:50:15:4E:10:90:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/ec1103d9-e275-3cf6-8d03-7e4a684dd3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl

            X509v3 Authority Key Identifier:
                keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:128::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:97:4d:0d:9a:07:b5:63:a6:4c:d5:e1:0e:70:c9:e0:21:50:
         b6:00:c8:a0:f7:2b:e6:c2:ef:cc:00:e7:09:1e:44:ee:46:df:
         8b:0e:e7:81:0d:04:4b:50:f4:ee:e1:6e:7e:8b:7f:ad:d3:da:
         29:0f:23:51:0e:90:bd:ff:83:6c:0c:43:b1:27:e1:1c:27:c3:
         25:7d:6d:dc:5b:c5:64:9a:8d:1c:db:5a:8e:21:12:1a:04:4c:
         09:37:dd:e1:92:8e:ee:d2:f9:4c:82:b6:45:8f:3b:9a:d3:22:
         62:98:6f:29:60:d4:d7:68:76:40:a6:10:87:e8:67:af:92:72:
         48:13:58:0d:e8:04:0a:13:bc:e0:80:91:ab:c3:c4:d8:50:17:
         10:30:4f:cd:01:ff:9f:8c:fd:93:97:82:26:c8:92:0e:98:97:
         74:cf:ef:79:94:f6:9d:44:60:81:88:58:5d:d9:92:ea:74:c1:
         d3:f7:7e:f0:96:a5:a8:8b:c7:ec:cc:ae:a1:51:4f:65:db:5b:
         7b:bb:50:16:fd:7a:a1:22:83:72:ca:9d:bb:9d:e8:95:e0:6a:
         ba:a5:20:8c:b2:93:79:a8:31:ca:cf:86:72:09:6d:24:ed:52:
         c3:ee:e1:2e:1d:db:a9:b7:34:f4:17:fb:8b:5c:23:87:eb:0c:
         d5:9d:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----